Ransomware, which claims to be 'the righteous thief'
They said they only attack targets who can pay more than a certain amount of money
and does not attack public infrastructure.
Also, they donate part of their profits to charity.

After stealing data, it performs encryption attack,
If don't pay the decryption fee, they threaten to expose the stolen data.

trueEP blocked this by own malicious acts blocking algorithm.
No signature updating and No learning required.